CVE-2026-42689: WordPress Events Manager plugin <= 7.4.7 - Race Condition vulnerability

Q: Which installations are affected?

The issue affects Pixelite Events Manager versions through 7.4.7. The available data does not identify a safe fixed version.

Q: Can an unauthenticated remote attacker exploit this?

The CVSS vector indicates the attack can be performed over a network without privileges or user interaction. Exploitation has high attack complexity, meaning successful exploitation depends on timing or other difficult conditions.

Q: What is the likely security impact?

The reported impact is limited to integrity, with no reported confidentiality or availability impact. The severity is low, with a CVSS score of 3.7.

Published Oct 12, 2026

Updated

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Pixelite Events Manager events-manager allows Leveraging Race Conditions.This issue affects Events Manager: from n/a through 7.4.7.

Affected Software

1 affected component

Pixelite Events Manager<=7.4.7

Event History

Oct 12, 2026

CVE Published

via MITRE·05:47 PM

Data Sourced

via MITRE·05:47 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which installations are affected?

The issue affects Pixelite Events Manager versions through 7.4.7. The available data does not identify a safe fixed version.

Can an unauthenticated remote attacker exploit this?

The CVSS vector indicates the attack can be performed over a network without privileges or user interaction. Exploitation has high attack complexity, meaning successful exploitation depends on timing or other difficult conditions.

What is the likely security impact?